Replace JSX attribute value
64%
Total Score
caution
Usable with caveats: the 2023 release has no newer releases and recent repository commit activity is absent.
The repository is owned by a user account rather than an organization, so there is no demonstrated organizational backing to offset the thin current maintenance evidence.
The package has released 12 times since November 2018, but its latest registry release was in May 2023, with no releases in the last 12 months. This materially raises maintenance risk despite its established history.
The repository recorded zero commits and zero active maintainers in the last three months. This is a significant current-maintenance gap, even with a recent push timestamp elsewhere in the repository metadata.
There was one new issue and one new pull request in the last month, but neither was closed or merged. This indicates some attention without evidence of effective recent delivery.
The repository name does not match the package and its README does not mention the package. This may be normal for a monorepo subpackage, but the signal leaves package-to-repository ownership less explicit.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.